Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/67U6LBqXLYSsDGLe-oVaKIYER18.roa
File: 67U6LBqXLYSsDGLe-oVaKIYER18.roa (raw, json)
Hash identifier: RLIFrqk6zaLOJPW0RaYM9kuW3j3iOTxsH9PkmrtqtG0=
Subject key identifier: EB:B5:3A:2C:1A:97:2D:84:AC:0C:62:DE:FA:85:5A:28:86:04:47:5F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018B055E8C3C3CAF0C3397250BBD98434107
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/67U6LBqXLYSsDGLe-oVaKIYER18.roa
Signing time: Fri 06 Oct 2023 14:22:44 +0000
ROA not before: Fri 06 Oct 2023 14:22:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.222.30.0/23 maxlen: 24
185.220.250.0/23 maxlen: 24
193.58.146.0/23 maxlen: 24
45.147.224.0/24 maxlen: 24
45.8.21.0/24 maxlen: 24
185.251.229.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.223.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 09:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:5e:8c:3c:3c:af:0c:33:97:25:0b:bd:98:43:41:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 6 14:22:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebb53a2c1a972d84ac0c62defa855a288604475f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:20:e4:3f:22:1b:48:45:ea:51:61:de:4b:
65:07:e5:72:81:37:3c:70:2f:2d:08:a4:39:4f:f6:
89:09:c1:03:dd:81:1b:3e:61:93:34:e2:7b:88:56:
4f:e6:39:6e:a7:8f:24:5e:27:58:2b:7c:f9:d6:2b:
1f:95:fc:48:68:ab:6d:6f:98:7a:24:eb:50:43:39:
f8:ae:4c:d5:b7:31:fc:9b:d8:31:c4:64:1b:66:de:
61:64:f5:e9:82:3e:3a:54:22:64:81:34:3c:d1:b3:
0c:87:2c:36:81:7b:81:9b:e8:68:47:3b:30:0f:83:
1c:95:a7:4d:92:be:2b:e4:17:8c:5c:e3:ee:77:39:
27:aa:2d:63:f4:f9:5b:e3:b8:17:e2:f4:ea:e4:42:
c9:de:e4:5c:7c:5c:23:ec:30:eb:0a:b0:3c:4c:32:
af:d6:cd:a9:26:62:12:fe:76:81:a8:a4:3d:84:4e:
72:90:53:fa:dd:4f:e6:f8:f8:5b:78:e9:e4:49:46:
10:d9:bc:31:13:5a:a1:1e:3e:9c:09:41:4f:3b:fe:
69:d8:de:da:d6:60:94:d3:45:e6:15:07:3e:a8:21:
ba:ea:67:11:87:3a:39:5c:ba:96:18:7b:46:5e:0f:
c7:15:47:80:f0:02:40:84:eb:a2:86:3b:02:c3:0f:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B5:3A:2C:1A:97:2D:84:AC:0C:62:DE:FA:85:5A:28:86:04:47:5F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/67U6LBqXLYSsDGLe-oVaKIYER18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
45.147.224.0/24
185.220.250.0/23
185.222.30.0/23
185.223.80.0/24
185.225.0.0/23
185.251.229.0/24
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:57:a7:f1:5e:f3:33:fd:dd:ae:18:e4:23:ff:2e:e1:5d:5e:
86:42:89:46:0f:25:56:94:bb:ea:3c:43:e5:00:e3:d2:0d:3b:
c4:e0:68:c3:24:92:14:2e:90:be:bb:05:4a:b7:b8:91:f7:8d:
84:d8:60:3d:11:cc:44:d4:99:31:90:cb:6a:79:cc:76:4c:c8:
a6:7c:67:15:e6:ba:60:cc:af:29:c1:8c:9a:1c:29:1e:62:8e:
a2:53:e1:b2:0b:c6:11:0d:ab:b2:7a:45:e8:7a:78:7d:52:b2:
fd:45:0c:a9:c8:09:a2:b8:ae:a0:59:bd:e4:6f:2b:5c:9a:2a:
2c:73:f1:d6:da:76:7e:86:84:cb:1b:7d:5e:64:01:24:05:7e:
30:9d:09:cf:f8:7e:89:43:7b:6d:d4:c4:e9:a5:24:34:29:00:
a3:db:a8:d4:b8:fe:83:ca:78:89:03:a8:1f:8d:44:38:2d:ed:
2f:3b:05:1a:bd:eb:0d:7d:0f:ea:20:c1:78:54:87:ef:85:33:
66:90:b8:c4:bd:69:c3:3b:77:74:8a:76:28:a1:f7:66:84:8d:
28:a3:2d:8f:6b:30:5d:01:f7:07:8b:1d:bd:57:ce:21:1b:fb:
07:0e:4d:b2:ee:5f:9f:4a:4f:92:c7:ec:1f:eb:fd:c5:3c:41:
9b:e8:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org